CVE-2018-1000800: Zephyrproject Zephyr

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

Affected products

Published 2018-09-06. Last modified 2026-06-17.